Home / Docs / Licenses

Reference page, kept current. This page is checked against the source tree, not written once and left; see the note at the bottom for the commit it was last verified against.

MayteraOS Third-Party Licenses

Cryptography

MayteraOS does not link a third-party crypto library. kernel/crypto/ is an in-house, from-scratch implementation used by the TLS 1.3 stack, SSH, and the capability-token system: AES, SHA-256/SHA-512, RSA (PKCS#1), ECDSA (P-256/P-384), Ed25519, ChaCha20, HMAC, a hardware-seeded CSPRNG, and MD4/MD5 (kept only for legacy protocol compatibility, not used for anything security-sensitive). An earlier plan to adopt wolfSSL and LibTom for this was not carried out; nothing from either project is present in the tree.

  • License: MayteraOS original code, part of the project's own GPLv2-or-later.
  • Location: kernel/crypto/

Browser Engine

The browser (userland/apps/browser/) links five NetSurf libraries plus the Duktape JavaScript engine, vendored at pinned upstream commits with a small MayteraOS-authored binding layer on top (DOM/CSS bindings, layout glue, and the freestanding shims each library needs to build without a hosted libc).

NetSurf libraries (libwapcaplet, libparserutils, libhubbub, libcss, libdom)

  • License: MIT (the individual NetSurf libraries; the browser front end itself is GPLv2, not linked into this port)
  • Website: https://www.netsurf-browser.org
  • Used for: HTML/CSS parsing, DOM, style selection

Duktape

  • License: MIT
  • Website: https://duktape.org
  • Used for: in-page JavaScript execution

Image Processing

Image decoding (BMP, JPEG, PNG, WebP) is original MayteraOS code (kernel/gui/*.c and the Rust ports under kernel/rustkern/), not a vendored decoder. stb_image is not present in the tree.

Icons

SVG Repo icons

  • License: CC-BY (attribution required)
  • Website: https://www.svgrepo.com
  • Used for: source artwork for a subset of the desktop/Start-menu icon set. The majority of icons added since 2026-07-20 are original MayteraOS line art, not SVG Repo sourced; the full per-icon table is kept in the repo's ATTRIBUTION.md.

Fonts

DejaVu Sans (in the OS)

  • License: Bitstream Vera license (permissive) plus DejaVu's own public-domain changes; both redistributable.
  • Website: https://dejavu-fonts.github.io
  • Used for: the OS's own UI and document typeface, shipped on the boot image as /FONT.TTF and loaded by kernel/gui/ttf.c.

IBM Plex (this website only)

  • License: SIL Open Font License (OFL) 1.1
  • Website: https://github.com/IBM/plex
  • Used for: typography on maytera.net itself, loaded from Google Fonts. It is not bundled with, or used by, MayteraOS the operating system.

Audio and Games

The audio stack vendors several decoders, each under its own upstream license (see kernel/media/<name>/COPYING or per-file headers in the source): libmad (MP3, GPLv2+), faad2 (AAC, GPLv2), Tremor/libogg (Vorbis, BSD-style/Xiph), Opus (BSD-style/Xiph), and dr_flac (FLAC, public domain / MIT-0). TinyGL (userland/libgl) is zlib-licensed and backs the software 3D used by the GL demo apps. AssaultCube and OpenArena were ported onto this stack and have run with real 3D rendering, but as of the current public release neither ships in this repository: their vendor/ engine trees carry a non-redistributable content license (AssaultCube) and a non-free bundled tool (OpenArena's ioquake3 tree includes the not-free lcc compiler), so both are withheld pending a compliance pass. See the repository's own ATTRIBUTION.md and README “Licensing” section for the current state.

DOOM (engine source only)

  • License: id Software DOOM Source Code License (not the GPL). The engine source is used under id's own DOOM Source Code License, and the per-file id Software header banners are kept intact in the source. The full upstream license document will be tracked from the authentic id release rather than retyped; see the repository's ATTRIBUTION.md for the current state.
  • Original: id Software
  • Location: distributed through the MayteraOS App Store rather than as source in this repository; the per-file id Software headers are kept intact rather than edited, and the upstream license document itself is fetched from the authentic upstream release rather than retyped from memory.
  • Note: only the open-source engine is distributed. The commercial game data (DOOM.WAD) is not included and is not distributed with MayteraOS; users must supply their own legally obtained WAD files as compatibility-testing material.

Lemmings-style game

  • License: Original MayteraOS implementation
  • Note: An original-code game inspired by the classic. No commercial game code or assets are included or distributed; any original game assets would have to be legally obtained and supplied by the user.

Python

/APPS/PYTHON.ELF ships as a MicroPython port (userland/python/micropython/), MIT-licensed port glue over MicroPython's own MIT license, giving a Python 3-compatible REPL and script runner with MayteraOS-specific os, socket and maytera modules for file, network and window access. A second, much smaller hand-written subset-of-Python interpreter also lives in this tree (userland/python/ examples and an original minimal interpreter), original MayteraOS code rather than a third-party component, used for simple scripts where the full MicroPython runtime is not needed. There is no CPython port in the current public repository or release. An earlier internal note on this page described a cross-compiled CPython 3.11.9 build as the shipping interpreter; that was inaccurate and has been corrected here to match what is actually in the source tree.

AI safety layer

Nova prompt-injection ruleset

  • License: MIT
  • Author: Thomas Roccia (nova-framework)
  • Used for: the keyword layer of the AI assistant's prompt-injection defenses (kernel/security/nova.c)

Photography

The boot splash and bundled wallpapers are edited from Pexels stock photography, used under the Pexels License (free for commercial and non-commercial use, no attribution required). The MayteraOS mark composited onto the splash is original artwork.

Operating System Components

MayteraOS Kernel and userland

  • License: GPLv2-or-later for the project's own code (the kernel statically links GPLv2 components such as libmad and faad2, which carries the combined binary's license up to GPLv2-or-later); permissively-licensed vendored components remain under their own terms as source, per component above.

License Compliance Notes

  1. GPL Components: When distributed as binary, source code availability must be ensured for GPL-licensed components (libmad, faad2, and the project's own GPLv2-or-later code).
  2. Public Domain / Permissive Components: dr_flac, TinyGL, Duktape, the NetSurf libraries, Tremor/libogg, Opus: attribution retained per component above, no further restriction.
  3. CC-BY Components: Must retain attribution (SVG Repo icon sources).
  4. Game Assets: Game WAD files and original game assets are never bundled with MayteraOS; users must legally obtain them separately.
  5. Third-Party Commercial Software: Any commercial third-party software shown running on MayteraOS (game data, legacy Win16 applications, etc.) is user-supplied compatibility-testing material. MayteraOS does not bundle, include, or distribute any third-party commercial software.

Verified against the source tree at commit a36311c (2026-08-06). This page is checked against the actual vendored code and build output on each audit pass, not maintained by memory.